Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/79Zomn_cf3gf6JA3cDRtdACQ2K4.roa
File: 79Zomn_cf3gf6JA3cDRtdACQ2K4.roa (raw, json)
Hash identifier: u9mNrsAamxW7PiYlhJwL7CNXdYRsh99imNF2PMpuCwM=
Subject key identifier: EF:D6:68:9A:7F:DC:7F:78:1F:E8:90:37:70:34:6D:74:00:90:D8:AE
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 015D49
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/79Zomn_cf3gf6JA3cDRtdACQ2K4.roa
Signing time: Wed 13 Apr 2022 10:05:52 +0000
ROA not before: Wed 13 Apr 2022 10:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89417 (0x15d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Apr 13 10:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efd6689a7fdc7f781fe8903770346d740090d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:89:e7:14:6d:d6:24:ae:0d:29:cf:2d:96:
64:3c:30:9a:d0:f9:ca:ae:14:76:44:79:b7:9c:48:
91:d7:92:d3:43:d2:d5:88:ba:08:17:e9:2c:75:a5:
49:3b:06:91:24:13:fc:6c:d5:b4:06:24:c5:03:52:
9c:b2:91:ab:2f:a8:d9:e5:a7:09:e8:29:d1:74:9a:
99:e4:44:43:1b:ad:7f:e6:52:e7:40:aa:45:93:4a:
b4:70:7c:1e:df:a0:eb:3d:d3:7e:2f:db:f3:b0:fd:
37:94:6d:95:8a:6b:43:cd:d0:e2:8c:d0:c7:a5:9f:
14:de:69:b7:b6:a8:3e:45:8b:1f:65:50:ec:d1:b6:
9f:01:98:17:b9:fe:90:e4:9d:fb:95:90:f5:49:9e:
c5:4d:0a:79:92:91:4f:38:49:88:2c:6e:42:5f:ec:
8c:77:62:3b:0a:f5:9b:55:f2:97:28:23:36:6e:e1:
9d:e8:07:11:c9:27:b7:d9:7b:92:70:71:f0:4d:14:
be:f4:a1:7d:e7:59:9c:bc:75:3a:68:60:b4:a5:51:
7e:d6:ca:38:2a:18:cc:64:2e:8e:f9:7d:94:0b:aa:
6c:8a:e9:8c:e5:d8:b0:2d:df:db:37:7f:dc:db:4d:
16:a4:a7:f5:3d:7c:2a:61:37:56:aa:b2:83:5c:e8:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:68:9A:7F:DC:7F:78:1F:E8:90:37:70:34:6D:74:00:90:D8:AE
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/79Zomn_cf3gf6JA3cDRtdACQ2K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:15:25:b1:c3:13:64:bd:45:e2:5e:bc:c4:e7:59:74:ae:5d:
40:96:21:06:31:06:0b:2a:1e:45:14:a5:ba:b1:d3:e2:59:46:
94:f5:21:31:d9:0c:38:85:ad:80:88:bf:ca:2c:95:15:ee:fc:
8a:6f:3c:9a:b6:8a:d3:68:36:40:13:d7:8d:99:15:12:05:5d:
9c:be:06:70:ea:84:c0:1a:95:85:30:90:ba:df:74:5c:fc:99:
4d:2a:26:43:88:20:b3:24:a2:d5:9d:96:1c:84:12:02:2a:ce:
ff:2c:f0:0b:d6:64:06:f7:ef:29:d9:27:0e:c2:bb:68:9a:b5:
26:a7:8f:b1:79:4b:17:16:46:30:c6:bb:7f:83:53:79:f9:e7:
40:af:9a:04:53:69:87:92:fe:70:25:06:b3:b2:6f:a0:8a:95:
22:2c:b9:74:8d:f2:d5:2b:a3:76:b9:65:63:74:be:30:e5:58:
d2:f5:83:e4:89:73:3b:4a:0d:dc:4d:00:90:bc:ed:77:95:e5:
63:8b:62:73:c3:d1:e5:8e:a7:ef:f4:59:d1:3e:d9:ba:26:ce:
dc:2b:d8:38:6d:37:cc:e8:ff:88:f1:80:0f:67:d2:f3:e0:7d:
ff:7a:9a:48:4f:c3:c7:3c:56:0a:fb:97:41:28:b0:f6:50:c0:
80:23:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:02 2025 by rpki-client